StealBit1.1 and earlier strings and config extraction scripts

Last update: Dec 29, 2022

Related tags

Text Processing stealbit1.1_config_extractor

Overview

StealBit1.1 and earlier scripts

Use strings_decryptor.py to extract RC4 encrypted strings from a StealBit1.1 sample(s).
Use config_extractor.py to extract encrypted configuration(ID and C2s) of a StealBit1.1 sample(s).

Tested on the following samples:

107d9fce05ff8296d0417a5a830d180cd46aa120ced8360df3ebfd15cb550636
6c9a92955402c76ab380aa6927ad96515982a47c05d54f21d67603814d29e4a5
26f8447d9f9e230d31cf43b991b85f336af604405572d3b817d4e54bd722bd3d
968875370dbc26a6439860f854c91f9ee675e588f8dbf78e6cb7e20b6d957bec
4b2b0c99b88e3fa7542165be931e2fd863f5546bbae71e9e8f21e2f3a1ebdda5
bd14872dd9fdead89fc074fdc5832caea4ceac02983ec41f814278130b3f943e
4db7eeed852946803c16373a085c1bb5f79b60d2122d6fc9a2703714cdd9dac0
be3b2e41a1622e498da2ca479623397977f8f43d71a521fabe0bba3dbba163a5
4f36bdc3c31a59bae783663385ed9174ecc5dac418ead46f8d14ba6b2beec50f
d9a8ae1d1e143f38845ea1a9dbe8476d2155c7457c7dc2a86bdb0bca1fcbe99f
61ac7ac908791456f2f5827dfd85be27b02027383f76dfd31aba7eff89c1aaee
f1f67fb89c0d1d3a36b086716f276100bc83a3bba2d7318dd3598ff5e2b0d9af

Owner

Soolidsnake

Malware addict

Soolidsnake

GitHub Repository

Returns unicode slugs

Python Slugify A Python slugify application that handles unicode. Overview Best attempt to create slugs from unicode strings while keeping it DRY. Not

1.3k Jan 04, 2023

Word-Generator - Generates meaningful words from dictionary with given no. of letters and words.

Meaningful Word Generator Generates meaningful words from dictionary with given no. of letters and words. This might be useful for generating short li

1 Jan 01, 2022

Fuzz a language by mixing up only few words.

afasi Fuzz a language by mixing up only few words. Status Beta. Note: The default branch is default. Use Examples Version General Help Translate Help

2 Dec 14, 2022

Compute distance between sequences. 30+ algorithms, pure python implementation, common interface, optional external libs usage.

TextDistance TextDistance -- python library for comparing distance between two or more sequences by many algorithms. Features: 30+ algorithms Pure pyt

3k Jan 02, 2023

BaseCrack is a tool written in Python that can decode all alphanumeric base encoding schemes.

BaseCrack Decoder For Base Encoding Schemes BaseCrack is a tool written in Python that can decode all alphanumeric base encoding schemes. This tool ca

383 Dec 27, 2022

A query extract python package

A query extract python package

4 Nov 28, 2021

A minimal code sceleton for a textadveture parser written in python.

Textadventure sceleton written in python Use with a map file generated on https://www.trizbort.io Use the following Sockets for walking directions: n

1 Jan 06, 2022

Correcting typos in a word based on the frequency dictionary

Auto-correct text Correcting typos in a word based on the frequency dictionary. This algorithm is based on the distance between words according to the

2 Feb 05, 2022

Athens: a great tool for taking notes and organising knowldge

AthensSyncer Athens is a great tool for taking notes and organising knowldge. But it is a bummer that you cannot use it accross multiple devices. Well

6 Dec 14, 2022

Extract price amount and currency symbol from a raw text string

price-parser is a small library for extracting price and currency from raw text strings.

252 Dec 31, 2022

Python flexible slugify function

awesome-slugify Python flexible slugify function PyPi: https://pypi.python.org/pypi/awesome-slugify Github: https://github.com/dimka665/awesome-slugif

471 Dec 20, 2022

TextStatistics - Get a text file wich contains English text

TextStatistics This program get a text file wich contains English text. The program analyses the text, and print some information. For this program I

2 Nov 15, 2021

Converts a Bangla numeric string to literal words.

Bangla Number in Words Converts a Bangla numeric string to literal words. Install $ pip install banglanum2words Usage

3 Aug 29, 2022

Hamming code generation, error detection & correction.

Hamming code generation, error detection & correction.

2 Jun 30, 2022

Hspell, the free Hebrew spellchecker and morphology engine.

Hspell, the free Hebrew spellchecker and morphology engine.

16 Sep 15, 2022

Parse Any Text With Python

ParseAnyText A small package to parse strings. What is the work of it? Well It's a module to creates parser that helps to parse a text easily with les

1 Jan 11, 2022

An extension to detect if the articles content match its title.

Clickbait Detector An extension to detect if the articles content match its title. This was developed in a period of 24-hours in a hackathon called 'H

5 Jul 26, 2022

Convert English text to IPA using the toPhonetic

Installation: Windows python -m pip install text2ipa macOS sudo pip3 install text2ipa Linux pip install text2ipa Features Convert English text to I

3 Jun 14, 2022

从flomo导出的笔记中生成词云

flomo-word-cloud 从flomo导出的笔记中生成词云如何使用？将本项目克隆到你的电脑上，使用如下的命令，安装所需python库 pip install -r requirements.txt 在项目里新建一个file文件夹，把所有从flomo导出的html文件放入其中运行main

9 Dec 30, 2022

Wikipedia Reader for the GNOME Desktop

Wike Wike is a Wikipedia reader for the GNOME Desktop. Provides access to all the content of this online encyclopedia in a native application, with a

126 Dec 24, 2022